ISO 42001 Will Not Make Your AI Safer | Guest: James Kavanagh

ISO 42001 Will Not Make Your AI Safer | Guest: James Kavanagh

Source: YouTube · GRC Engineering Club · published Sep 10, 2026 · 47:09

Compliance & GRC
No ratings yet Log in to rate
Transcript Available
Description

[BLUF] James Cavanagh advocates for "adaptive AI governance" to replace rigid, static compliance frameworks, arguing that governance must evolve alongside the complex, unbounded nature of AI systems to ensure genuine safety and security 13:51.

Key Takeaways:
• Traditional compliance often devolves into "checkbox" or even "malicious" compliance, where organizations create facades to satisfy audits without actually improving safety 24:14.
• Adaptive governance focuses on guiding human behavior and establishing continuous feedback loops rather than relying on static rules that fail to account for system complexity 16:13.
• Engineering principles from other safety-critical industries, such as separating control systems from the system itself, are often ignored in AI, leading to ineffective guardrails 30:10.
• Effective leadership in this space requires fostering curiosity and using "adaptive leadership" techniques to help diverse teams (legal, engineering, audit) collaborate on solving complex problems 11:00.
• Mastery of AI governance involves a progression from learning theory to application, and finally to teaching and influencing others, which solidifies understanding 38:30.

While AI governance is a challenging field requiring multidisciplinary expertise, it is a vital career path as AI becomes integral to almost all professional tasks. Organizations and individuals must prioritize understanding how to govern these systems safely rather than just adopting them.

Sources:

  • 13:51 Definition of adaptive governance as matching the change characteristics of the system.
  • 24:14 Discussion on the dangers of checkbox and malicious compliance.
  • 30:10 Importance of engineering design rules like separating control systems.
  • 11:00 Explanation of adaptive leadership techniques for teams.
  • 38:30 Stages of learning, application, and mastery in governance.
  • 44:05 The necessity of widespread AI governance skills for future safety.

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 1 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Compliance & GRC. Commonly maps to: Security and Risk Management, Asset Security. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

Welcome friends to another edition of the Anti-Checkbox podcast. I'm joined today by someone who I feel it's going to go well based on how the pre-call went. It was really truly as if I had met someone from from college and we had just reconnected. It just we just started chatting like, "Hey, how's things? How's the family?" But without further ado, joined today by James Cavanagh. James. >> Yeah, nice to meet you. Thanks for having me on the call. >> So, what exactly? I mean, people have seen your content online and you know, they've uh Yeah, well, absolutely. That's the point, right? Like that's what we want to do here. And hopefully, right? We'll we'll include all relevant links in in the show notes here. But what I always like to start with folks that are out there and putting content o…